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I. INTRODUCTION 



Since Shor [|I| showed that it was possible to create quantum error-correcting codes, there 
has been a great deal of work on trying to create efficient codes. Calderbank and Shor |2j 
and Steane demonstrated a method of converting certain classical error-correcting codes 
into quantum ones, and Laflamme et al. 0] and Bennett et al. 0] produced codes to correct 
one error that encode 1 qubit in 5 qubits. 

Suppose we want to encode k qubits in n qubits. The space of code words is then some 
2 fc -dimensional subspace of the full 2 n -dimensional Hilbert space. The encodings of the 
original 2 k basis states form a basis for the space of code words. When a coherent error 
occurs, the code states are altered by some linear transformation M: 

\^)^M\^). (1) 

We do not require that M be unitary, which will allow us to also correct incoherent errors. 

Typically, we only consider the possibility of errors that act on no more than t qubits. 
An error that acts non-trivially on exactly t qubits will be said to have length t. An error 
of length 1 only acts on a 2-dimensional Hilbert space, so the space of 1-qubit errors is .M2? 
the space of 2 x 2 matrices. 

An error-correction process can be modeled by a unitary linear transformation that 
entangles the erroneous states M\ipi) with an ancilla \A) and transforms the combination to 
a corrected state 

(M|V*» ® \A) 1— |^> ® \A M ). (2) 

Note that the map Mh \Am) must be linear, but not necessarily one-to-one. If the map is 
injective, I will call the code non- degenerate, and if it is not, I will call the code degenerate. 
A degenerate code has linearly independent matrices that act in a linearly dependent way 
on the code words, while in a non-degenerate code, all of the errors acting on the code words 
produce linearly independent states. Note that Shor's original code is a degenerate code 
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(phase errors within a group of 3 qubits act the same way), while the k = 1, n — 5 codes 0|| 
are non-degenerate. 

At this point, we can measure the ancilla preparatory to restoring it to its original state 
without disturbing the states 1^). This process will correct the error even if the original 
state is a superposition of the basis states: 



An incoherent error can be modeled as an ensemble of coherent errors. Since the above 
process corrects all coherent errors, it will therefore also correct incoherent errors. After 
the ancilla is measured and restored to its original state, the system will once again be 
in a pure state. Sufficient and necessary conditions for the system to form a quantum 
error-correcting code are given in [||] and ||. While errors acting on different code words 
must produce orthogonal results, different errors acting on the same code word can produce 
non-orthogonal states, even in the non-degenerate case. 

We can use the definition of non-degenerate quantum error-correcting codes to derive 
the quantum Hamming bound |7J on their possible efficiency. It is not known whether 
the quantum Hamming bound applies to degenerate codes, although some recent evidence 
suggests that it does not f§||. However, the breeding and hashing protocol presented by 
Shor and Smolin || and the random matrix encodings mentioned by Lloyd do not give a 
100% chance of successful decoding, even if only a fixed finite number of errors occur. There 
are no known degenerate codes that guarantee success that violate the quantum Hamming 
bound. I show in appendix [A] that a certain class of degenerate codes to correct 1 error are, 
in fact, limited by the quantum Hamming bound. The question for fully general degenerate 
codes remains open, although Knill and Laflamme || showed that at least 5 qubits are 
necessary to correct 1 error. Below, I will assume the code is non-degenerate. 

Since there are 3 possible non-trivial 1-qubit errors, the number of possible errors M 




(3) 




of length I on an n-qubit code is 



Each of the states M\ipi) must be linearly 
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independent, and all of these different errors must fit into the 2 n -dimensional Hilbert space 
of the n qubits. Thus, for a code that can correct up to t errors, 



1=0 



( \ 

n 



V 1 



< 2 n . 



(4) 



For large n, this becomes 



- < 1 - - log 2 3 - Hit In) 

n n 



(5) 



where H(x) = — xlog 2 x — (1 — x) log 2 (l — x). 

It is an interesting question whether it is generally possible to attain this bound, or 
whether some more restrictive upper bound holds. Breeding and hashing methods |To|,[5[| 
can asymptotically saturate the quantum Hamming bound for large blocks, but have a 
small but non-zero probability of failure, even for only one error. For t = 1 and k = 1, the 
quantum Hamming bound (f|) implies n > 5, so the known 5-qubit code does saturate the 
bound. Below, in section |TTJ, I w iU gi ye a class of codes saturating the bound for t — 1 and 
n = 2 J (so k = n — j — 2). For large n, the efficiency k/n of these codes approaches 1. In 
this sense, they are the analog of the classical Hamming codes. To aid in the construction, 
in section |TJ, I will present some methods for analyzing quantum error- correcting codes. 
The method I present of using code stabilizers to describe codes is also given, using slightly 



different language, in [11 



Throughout this paper, I will assume the basis of M.2 is 

n \ 

(6) 

Some of the results will hold for other bases, but many will not. This basis has two important 
properties: all of the matrices either commute or anticommute, and X 2 = —Y 2 = Z 2 = I. 
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II. CODE STABILIZERS 



Suppose we have an n-qubit system. Let us write the matrices X, Y, and Z as X i} Yi, 
and Zi when they act on the ith qubit. Let Q be the group generated by all 3n of these 
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matrices.^] Since (Xi) 2 = (Zi) 2 = I and Y; = ZiXi = —XiZi, Q has order 2 2n+1 (for each i, 
we can have /, X t , Y i7 or Zi, plus a possible overall factor of -1). The group Q has a few other 
useful features: every element in Q squares to ±1 and if A, B G Q, then either [A, B] = or 
{A B} = 0. 

The code words of the quantum error-correcting code span a subspace T of the Hilbert 
space. The group Q acts on the vectors in T. Let 7i be the stabilizer of T — i.e., 

U = {M G Q s.t. M|V) = V |V>) G T}. (7) 

Now suppose E G Q and 3M G W s.t. {£,M} = 0. Then V|<0), \<f>) G T, 

(01^1^) = (0|i?M^) = -(0|ME|^) = -<0|£?|V> (8) 

so (01^1^) = 0. 

The implications of this are profound. Suppose and F are two errors, both of length t 
or less. Then E\ip) and -F|</>) are orthogonal for all \<p) G T whenever F^E anticommutes 
with anything in TC. This is the requirement for a non-degenerate code, so to find such a 
code, we just need to pick T and corresponding 7i so that every non-trivial matrix in Q of 
length less than or equal to 2t anticommutes with some member of 7i. 

It is unclear whether every quantum error-correcting code in the X, Y , Z basis can be 
completely described by its stabilizer 7i. Certainly, a large class of codes can be described 
in this way, and I do not know of any quantum error-correcting codes that cannot be so 
described. 

Given T, we can figure out TC, but it will be much easier to find codes using the above 
property if we can pick H and deduce a space T of code words. First I will discuss what 
properties 7i must have in order for it to be the stabilizer of a space T, then I will discuss how 
to choose 7i so that the matrices of length 2t or less anticommute with one of its elements. 



For n = 1, Q is just D4, the symmetry group of a square. For larger n, Q is {D^) n / '(Z2) 
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Clearly, TC must be a subgroup of Q. Also, if M G TC, then M 2 \ifj) = M\i/j) = for 
\ip) G T, so M cannot square to -1. Finally, if M, N G 7i, then 

MiV|V) = (9) 
NM\ip) = |^) (10) 
[M,iV]|^) = (11) 

If {M, A^} = 0, then [M, AT] = 2MN, but M and A/" are unitary, and cannot have eigen- 
values. Thus, [M, N] = 0, and TC must be abelian. 

Thus, TC must be abelian and every element of TC must square to 1, so TC is isomorphic to 
(Z2) a for some a. It turns out that these are sufficient conditions for there to exist non-trivial 
T with stabilizer TC, as long as TC is not too big. The largest subspace T with stabilizer TC 
will have dimension 2 n ~ a . To show this, I will give an algorithm for constructing a basis for 
T. Intuitively, it is unsurprising that this should be the dimension of T, since each generator 
of TC has eigenvalues ±1 and splits the Hilbert space in half. 

Consider a state that can be written as a tensor product of 0s and Is. This sort of state is 
analogous to one word of a classical code, so I will call it a quasi- classical state. Sometimes 
I will distinguish between quasi-classical states that differ by a phase and sometimes I will 
not. Now, given a quasi-classical state |</>), then 

|V) = M l^) (12) 
Men 

is in T,0 since applying an element of TC to it will just rearrange the sum. I will call |</>) 
the seed of the code word By the same argument, if M G TC, M\<p) acts as the seed 
for the same quantum code word as \4>). Not every possible seed will produce a non-zero 
code word. For instance, suppose TC = {I,ZiZ 2 } and we use |01) as our seed. Then 
|V) = /|01) + Z 1 Z 2 |01) =0. 



2 In fact, |0) does not need to be a quasi-classical state for 1^} to be in T. Any state will do, but 
it is easiest to use quasi-classical states. 
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To find elements of T, we try quasi-classical states until we get one that produces non- 
zero call it j^i). I will show later that such a state will always exist. We can write j^i) 
as a sum of quasi-classical states, any of which could act as its seed. Pick a quasi-classical 
state that does not appear in j^i) and does not produce 0, and use it as the seed for a second 
state |^ 2 )- Continue this process for all possible quasi-classical states. The states \ipi) will 
then form a basis for T. None of them share a quasi-classical state. 

To see that {iV'i)} is a basis, imagine building up the elements of H by adding generators 
one by one. Suppose H = (Mi, M 2 , . . . M a ) (i.e., H is generated by Mi through M a ). Let H r 
be the group generated by Mi through M r , and look at the set S r of quasi-classical states 
produced by acting with the elements of H r on some given quasi-classical seed \4>). The 
phases of these quasi-classical states will matter. The next generator M r+1 can do one of 
three things: 

1. it can map the seed to some new quasi-classical state not in S r , 

2. it can map the seed to plus or minus itself, or 

3. it can map the seed to plus or minus times some state in S r other than the seed. 

I will call a generator that satisfies case 1 a type 1 generator, and so on. 

In the first case, all of the elements of H r +i — H r will also map the seed outside of S r : If 
N G H r+1 - H r , then N = MM r+1 for some M G H r . Then if ±N\<j>) G S r , N\</>) = ±M'|0) 
for some M' G H r - Then M r+1 \cf)) = ±M~ 1 M'|0) G S r , which contradicts the assumption. 
Thus, S = S a will always have size 2 b , where b is the number of type 1 generators. 

In the second case, the new generator must act on each qubit as the identity /, as —I, 
or as Zi, so type 2 generators can be written as the product of Z's. In principle, a type 2 
generator could be -1 times the product of Z's, but the factor of -1 slightly complicates the 
process of picking seeds, so for simplicity I will assume it is not present. The method of 
choosing H that I give below will always create generators without such factors of -1. 

In the third case, when \<p') = ±M r+ i|0) is already in S r , then there exists N E H r 
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with AT |0) = |0'). We can then use iV -1 M r+ i as a new generator instead of M r+1 , and since 
iV -1 M r+1 |0) = ±|0), we are back to case two. After adding all of the generators, changing 
any of type 3 into type 2, we are left with b generators of type 1 and a — b generators of 
type 2. 

If one of the type 2 generators Mj gives a factor of -1 acting on the seed, the final state 
is 0: 



Otherwise is non-zero. We can simplify the computation of by only summing over 
products of the type 1 generators, since the type 2 generators will only give us additional 
copies of the same sum. Then \ip) will be the sum of 2 b quasi-classical states (with the 
appropriate signs). 

Is this classification of generators going to be the same for all possible seeds? Anything 
that is a product of Z's has all quasi-classical states as eigenstates, and anything that is not 
a product of Z's has no quasi-classical states as eigenstates. Thus if a generator is type 2 
for one seed, it is type 2 for all seeds. Type 1 generators cannot become type 3 generators 
because then the matrix M _1 N would be type 2 for some states but not others. Thus, all 
of the states \ipi) are the sum of 2 b quasi-classical states, and a — b of the generators of Tt 
are the product of Z's. Note that this also shows that the classification of generators into 
type 1 and type 2 generators does not depend on their order. 

Since a seed produces a non-trivial final state if and only if it has an eigenvalue of +1 for 
all of the type 2 generators, all of the states \ipi) live in the joint +1 eigenspace of the a — b 
type 2 generators, which has dimension 2 n ~( a ~ b \ We can partition the quasi-classical basis 
states of this eigenspace into classes based on the in which they appear. Each partition 
has size 2 b , so there are 2 n ~ a partitions, proving the claimed dimension of T. The states 
form a basis of T. 

We can simplify the task of finding seeds for a basis of quantum code words. First, 
note that |0) = 1 00 . . . 0) is always in the +1 eigenspace of any type 2 generator, so it can 




(13) 
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always provide our first seed. Any other quasi-classical seed \<f>) can be produced from |0) 
by operating with some N G Q that is a product of X's. For N\0) to act as the seed for 
a non-trivial state, N must commute with every type 2 generator in H: If Mj is a type 2 
generator, and {TV, Mj| = 0, then 

Mi(N\0)) = -NMi\0) = -N\0). (14) 

But only quasi-classical states which have eigenvalue +1 give non-trivial code words, so N 
must commute with the type 2 generators. Two such operators N and N' will produce seeds 
for the same quantum code word iff they differ by an element of H — i.e., N _1 N' G H. This 
provides a test for when two seeds will produce different code words, and also implies that 
the product of two operators producing different code words will also be a new code word. 
Thus, we can get a full set of 2 n ~ a seeds by taking products of n — a operators Aq, . . . , N n - a . 
I will call the JVj seed generators. I do not know of any efficient method for determining the 
N t . 

Once we have determined the generators Mj of H and the seed generators JVj, we can 
define a unitary transformation to perform the encoding by 

\ ClC2 ... Ck )^-L JJ (I + M $N?N?...N?\0). (15) 

Mi type 1 

However, I do not know of an efficient way to implement this tranformation. 

Now I turn to the next question: how can we pick 7i so that all of the errors up to length 
2t anti-commute with some element of it? Given M G Q, consider the function ju '■ G — > Z 2 , 

if [M, N] = 



f M (N) 



(16) 

1 if {M, N} = 



Then J'm is a homomorphism. If 7i = (Mi, M 2 , . . . M a ), then define a homomorphism 

f-.g^ (z 2 r by 

f(N) = (f Ml (N), fM 2 (N), ■ ■ ■ fM a (N)) • (17) 

Below, I will actually write f(N) as an a-bit binary string. With this definition of /, 
f(N) — 00 ... iff N commutes with everything in Ti. We therefore wish to pick H so that 
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f(E) is non-zero for all E up to length 2t. We can write any such E as the product of F 
and G, each of length t or less, and f(E) ^ iff f(F) ^ f(G). Therefore, we need to pick 
7i so that f(F) is different for each F of length t or less. 

We can thus find a quantum error-correcting code by first choosing a different a-bit 
binary number for each X* and Z^. These numbers will be the values of /pQ) and f{Zj) 
for some TC which we can then determine. We want to pick these binary numbers so that 
the corresponding values of f(Yi) and errors of length 2 or more (if t > 1) are all different. 
While this task is difficult in general, it is tractable for t = 1. In addition, even if all of the 
f(E) are different, we still need to make sure that TC fixes a non-trivial space of code words 
T by checking that Tt is abelian and that its elements square to +1. 



III. THE CODES 

Now I will use the method described in section |IT] to construct an optimal non-degenerate 
quantum error-correcting code for n = 2- 7 . The quantum Hamming bound (Q) tells us that 
k < n — j — 2, so we take a = j + 2 and j > 3. I will also show explicitly the construction for 



n = 8. Steane |T2| has found the same k = 3, n = 8 code following inspiration from classical 



error-correcting codes, and Calderbank et al. [0 have found a different k = 3, n = 8 code. 



We want to pick different (j + 2)-bit binary numbers for X,i and Zi (i — 1 . . . n) so that 
the numbers for Yj, which are given by the bitwise XOR of the numbers for and Zj, 
are also all different. The numbers for n = 8 are shown in table |I[ In order to distinguish 
between the X's, the Y's, and the Z's, we will devote the first two bits to encoding which of 
the three it is, and the remaining j bits will encode which qubit i the error acts on (although 
this encoding will depend on whether it is an X, a Y, or a Z). 

The first two bits are 01 for an X, 10 for a Z, and 11 for a Y, as required to make / a 
homomorphism. For the Xj's, the last j bits will just form the binary number for i — 1, so 
X\ is 0100 ... 0, and X n is 0111 ... 1. The encoding for the last j bits for the Z^s is more 
complicated. We cannot use the same pattern, or all of the Y^'s would just have all 0s for 
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01000 


x 2 


01001 


^3 


01010 


x± 


01011 


Z\ 


10111 


z 2 


10000 


Zz 


10110 




10001 




mil 


1 2 


1 1 001 


1 3 


1 1 100 


1 4 


1 1 01 


x 5 


01100 


x 6 


01101 


x 7 


oino 


*8 


01111 




10010 


z 6 


10101 


z 7 


10011 


Zs 


10100 


Y 5 


11110 




11000 


Y 7 


11101 


Y 8 


11011 



TABLE I. The values of f(Xi), f(Y t ), and f{Zi) for n = 8. 



the last j bits. Instead of counting 0, 1, 2, 3, ... , we instead count 0, 0, 1, 1, 2, 2, ... . 
Writing this in binary will not make all of the numbers for the Z's different, so what we do 
instead is to write them in binary and then take the bitwise NOT of one of each pair. This 
does make all of the Z's different. We then determine what the numbers for Yi are. 

How we pick which member of the pair to invert will determine whether all of the numbers 
for Yi are different. For even j, we can just take the NOT for all odd i; but for odd j, we 
must take the NOT for odd i when i < 2- 7-1 and for even i when i > 2 J . A general proof 
that this method will give different numbers for all the Y^s is given in appendix |B[ 

Now that we have the numbers for all of the 1-qubit errors, we need to determine the 
generators Mi . . . M a of 7i. Recall that the first digit of the binary numbers corresponds to 
the first generator. Since the first digit of the number for X\ is 0, Mi commutes with Xi, 
the first digit of the numbers for Yi and Z\ are both 1, so M\ anticommutes with Y\ and 
Z\. Therefore, M\ is X\ times the product of matrices which only act on the other qubits. 
Similarly, the first digit of the number for each Xi is and the first digits for Yi and Zi are 
both 1, so Mi = X\X 2 . . . X n (this is true even for j > 3). Using the same principle, we can 
work out all of the generators. 

The results for n = 8 are summarized in table [TI]. Note that all of these generators square 
to +1 and that they all commute with each other. A proof of this fact for j > 3 is given 
in appendix |C|. Thus we have a code that encodes 3 qubits in 8 qubits, or more generally 
n—j —2 qubits in 2 J qubits. For these codes, there is 1 type 2 generator M 2 . The remaining 
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Mi 




x 2 


x 3 


x 4 


x 5 


x & 


X 7 


x 8 


M 2 


Zi 


z 2 


z 3 


z 4 


z 5 


Ze 


z 7 


z 8 


M 3 


X! 


I 


x 3 


I 


z 5 


Y e 


z 7 


Y 8 


M 4 


X! 


I 


Y 3 


Z A 


x 5 


I 


Y 7 


Z s 


M 5 


Xl 


z 2 


I 


n 


I 


Y 6 


x 7 


Z 8 


Ni 


X! 


x 2 


I 


I 


I 


I 


I 


I 


N 2 


X! 


I 


x 3 


I 


I 


I 


I 


I 


N 3 


X! 


I 


I 


I 


x 5 


I 


I 


I 



TABLE II. The generators of 7i and seed generators for n = 8. 

j + 1 generators are type 1. 

Table [TT] also gives seed generators for n = 8. We can see immediately that they all 
commute with M 2 , the type 2 generator. It is less obvious that they all produce seeds for 



different states, but using them produces 8 different quantum codes words, listed in table |Tj, 
so they do, in fact, form a complete list of seed generators. This partly answers the question 
of how often we can saturate the quantum Hamming bound by showing that for 1 error, 
it can be saturated for arbitrarily large n. Although the methods given above may help 
somewhat, finding optimal codes to correct more than one error remains a difficult task. 

I would like to thank John Preskill for helpful discussions. This work was supported in 
part by the U.S. Department of Energy under Grant No. DE-FG03-92-ER40701. 



APPENDIX A: PROOF THAT CERTAIN DEGENERATE CODES CANNOT 
DEFEAT THE QUANTUM HAMMING BOUND FOR t = 1 

While there is no known proof that degenerate quantum error-correcting codes cannot 
beat the quantum Hamming bound for arbitrary t and n, I will present a proof that codes to 
correct just 1 error are, in fact, limited by that bound, so long as the only source of degen- 
eracies is when linearly independent error matrices map a code word into a one-dimensional 
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|^o) = 100000000) + lllllllll) + |10100101) + |10101010) + |10010110) + 101011010) 
+ 101010101) + 101101001) + 100001111) + 100110011) + 100111100) 
+ 111110000) + 111001100) + 111000011) + 110011001) + 101100110) 

|^i) = |11000000) + 100111111) + 101100101) + 101101010) - 101010110) + 110011010) 
+ |10010101) - |10101001) + 111001111) - 111110011) - 111111100) 
+ 100110000) - 100001100) - 100000011) - 101011001) - |10100110) 

|^ 2 ) = lioiooooo) + 101011111) + 100000101) - 100001010) + 100110110) + 111111010) 

- 1 11110101) + 111001001) - 1 10101111) + 110010011) - 110011100) 

- 101010000) + 101101100) - 101100011) - 100111001) - 111000110) 
l^s) = 101100000) + 110011111) + 111000101) - 111001010) - 111110110) + 100111010) 
- 100110101) - 100001001) - 101101111) - 101010011) + 101011100) 
- 110010000) - 110101100) + 110100011) + 111111001) + 100000110) 
|^4) = lioooiooo) + 101110111) - 100101101) + 100100010) + 100011110) - 111010010) 
+ 111011101) + 111100001) - 110000111) - 110111011) + 110110100) 
- 101111000) - 101000100) + 101001011) - 100010001) - 111101110) 
\tp 5 ) = I01001000) + 110110111) - 111101101) + 111100010) - 111011110) - 100010010) 
+ 100011101) - 100100001) - 101000111) + 101111011) - 101110100) 
- 110111000) + 110000100) - 110001011) + 111010001) + 100101110) 

|V 6 ) = 100101000) + 111010111) - 110001101) - (10000010) + |10111110) - |01110010) 
- 101111101) + (01000001) + 100100111) - 100011011) - (00010100) 

+ 111011000) - 111100100) - 111101011) + 110110001) + 101001110) 
I^t) = 111101000) + 100010111) - 101001101) - 101000010) - 101111110) - 110110010) 

- 1 10111101) - 110000001) + 1 11100111) + 111011011) + 111010100) 
+ 100011000) + 100100100) + 100101011) - 101110001) - 110001110) 



TABLE III. The quantum code words for the n = 8 code. 
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subspace. For instance, if three different errors map code words into a single two-dimensional 
subspace, this condition will not generally be satisfied. 

Given a degenerate quantum error- correcting code of this type that corrects 1 error, 
we can list a number of conditions that describe which errors are degenerate. I will call 
these relations degeneracy conditions. As with the stabilizers in section [Q], each independent 
condition will reduce the space of possible code words by a factor of 2. Note that I am not 
requiring that the basis for errors be the X, Y, Z basis I have used in the rest of the paper. [] 

Suppose there are / different degeneracy conditions describing the code. Each one equates 
two one-qubit errors, so at most 21 qubits are affected by the degenerate errors. The errors 
on the remaining n — 2l qubits must produce mutually orthogonal states. There are 3(n — 21) 
possible errors affecting those qubits. 

Furthermore, errors on those qubits commute with the degenerate errors, since they act 
on different qubits, so if M\ipi) = N\ipi) and E is an error that acts on a qubit unaffected 
by the degenerate errors, 

ME\ipi) = EM\ipi) = EN\ipi) = NE\ipi). (Al) 

Thus, the state E\ipi) still satisfies the same set of degeneracy conditions. The space of 
states that satisfy the given set of I degeneracy conditions has dimension at most 2 n ~ l . To 
fit all the states E\ipi) inside it, if / < n/2, we must have 

[1 + 3(n - 21)} 2 k < 2 n ~\ (A2) 

or 

k <n — l — log 2 [1 + 3(n - 21)] = g(l). (A3) 

3 The proof that the dimension of T is 2 n ~ l given in section [0| only works for the X, Y, Z basis, 
but for this appendix, I only need the weaker result that the dimension of T is at least halved 
by any degeneracy condition that constrains a qubit unaffected by any of the other degeneracy 
conditions. This should be self-evident. 
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n k 

5 1 

6 1 

7 2 

8 3 

9 4 

10 5 

11 5 

12 6 

13 7 

TABLE IV. The maximum k allowed by the quantum Hamming bound for n < 13 

For 1 = 0, this becomes the quantum Hamming bound. Now, 

dg _ 6/ In 2 

dl~ 1+ l + 3(n-2/)- (A4) 

Therefore g(l) is decreasing for 

6 

1 + 3(n - 21) > - — (A5) 
In 2 

, n ( 1 1\ . k . 

l< -2-\^2--& (A6) 

Thus, the quantum Hamming bound holds for I < {n — 3)/2. For I > {n — 3)/2, we still 
have < n — / < (n + 3)/2. This automatically satisfies the quantum Hamming bound for 
n > 13 (see table 

For n < 13, I > (n — 3)/2, we need a different argument. When I < n — 1, there 
must always be at least one degeneracy condition that relates errors on two qubits that 
are unaffected by any other degeneracy conditions. There are three possible errors on each 
qubit, and only one pair of them are going to produce the same results, so there are still 5 
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different errors, plus the possibility of no error. As above, these errors will remain within 
the space that satisfies the other I — 1 degeneracy conditions, so 

(l + 5)2 fe < 2 n ' {l ~ 1 \ (A7) 

or k < n — I + (1 — log 2 6) (i.e., k < n — I — 2). When I > (n — 3)/2, this means k < (n — l)/2. 
Applying this condition for n < 12 restricts violations of the quantum Hamming bound to 
n < 6, specifically: n = 6 and I = 2, and n = 4 and I = 1. For these two cases, we can 
directly apply equation (|A2|) to see that for n = 6 and I = 2, k < 1, in accordance with the 
quantum Hamming bound; and for n = 4 and I — 1, k — 0. 

Finally, for I = n — 1, there must be at least one qubit that is only affected by a single 
degeneracy condition. All three errors on this qubit commute with the other n— 2 degeneracy 
conditions, so 

(1 + 3) 2 k < 2 n - {n ~ 2) (A8) 

Therefore k = 0, and the quantum Hamming bound holds for any degenerate quantum code 
where linearly independent errors can only map code words into a one- dimensional subspace. 

APPENDIX B: PROOF THAT THE NUMBERS FOR Y, L ARE ALL DIFFERENT 

The construction of the numbers for Xi and Zi immediately demonstrates that they are 
all different. However, it is not as clear that all of the numbers for the l^'s, which are 
determined by the numbers for the AVs and Zj's, will also be different. The first two bits 
just enforce the requirement that any Yj is different from an X or a Z, so I will only consider 
the last j bits. All references to bit number in this appendix will refer to position within 
the last j bits, so bit number "1" is actually bit 3, and bit "/" is actually bit I + 2. 

Consider the pictorial representation of the algorithm to pick the errors' binary numbers 
given in table M. The numbers given for Xi are the actual numbers that appear. For Yi and 
Zj, we need to take an XOR with the parity of i (for j even or i < 2 J ~ 1 ), or an XOR with 
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Xi-. 






1 





1 





1 





1 





1 





1 





1 


1 


1 


1 


1 


1 


1 


1 


1 



Zf Parity XOR 















1 


1 








1 


1 








1 


1 





1 1 





1 1 





1 1 





1 1 



Yf. Parity XOR 






1 





1 


1 








1 


1 








1 


1 





1 


1 


1 


1 


1 


1 


1 


1 



TABLE V. The first 4 bits (of the last j) of the numbers for Xi, Yi, and Z{. The pth row 
corresponds to the pth bit and the columns in the pth row correspond to the possible values for 
the first p bits of i. For Yi and Zi, the actual numbers require an additional XOR with the parity 
or reverse of the parity of i. 
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the reverse of the parity of % (for j odd and i > 2 J_1 ). We can see that before we apply the 
XOR, the number for Yi encodes % in a unique fashion, since if i and i' first differ in the rth 
bit, then the numbers for Yi and Yy will also differ in the rth bit. The only way we could 
get two of the numbers to be the same would be if the XOR operation reverses one of a pair 
that would normally have complementary values in all bits. 

Does this ever happen? Given a number f(Yi) for % < n/2, the number with complemen- 
tary bits must appear for % > n/2, since the first digit does not change until then. The XOR 
will therefore collapse these two numbers into one whenever the parity of the appropriate 
i's is the same (for j odd) or different (for j even). 

Pick some bit string starting with 0. There will be an % < n/2 such that Yi has that 
number. Which i' will have the complementary bitstring? If we take the binary represen- 
tation of i, it will begin with a and the binary representation of i' will begin with a l.f] 
The next digit of i can be either or 1, and from table [V|, we can see i' will have the same 
value for this digit. The third digits of i and i' will be opposite again. In general, a in 
the rth digit of i or i' means the two squares relevant to the next digit will read 01, while a 
1 in the rth digit will mean the two squares for the next digit will read 10. Thus, if i and 
i' agree in the rth digit, they will disagree in the next digit, and vice- versa. Thus, i and %' 
agree on even-numbered digits and disagree on odd-numbered digits. 

This means the last digit agrees for j even and disagrees for j odd. Therefore, the XOR 
will not make Yi the same as Y^ — it will either reverse both of them or neither of them. 
This explains why different rules for odd and even j were necessary. 



4 I am ignoring the special case of i = n/2, which works on the same principle after the first digit 
of i. 
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APPENDIX C: PROOF THAT THE GENERATORS OF H COMMUTE 



We can also use table [V] to help us understand what the generators Mi, . . . M a of 7i look 
like. Mi is always the product of all n Xj's, and M 2 is always the products of all the Zj's. The 
other generators are bit more complicated, but still behave systematically. As we advance 
i, they cycle through the sequence / — > Z — > X — > Y, with a change every 2 J '~( r ~ 2 ' qubits 
for generator M r . In addition, the NOT switches I <—>■ X and Z <-> K whenever it applies 
- odd qubits for even j; odd qubits for the first half and even qubits for the second half for 
odd j. This immediately implies that every M r for r > 2 has equal numbers of X's, K's, 
Z's, and J's, namely, 2 J ' -2 of each. Since j > 3, this means there are an even number of K's, 
so M 2 = +1. 

Now, do the generators commute? Any time two generators have non-trivial but different 
operations on a qubit, we get a factor of -1 when we commute them. Therefore, we can 
determine if M r and M s commute by counting the qubits on which they differ and neither 
is the identity. If this count is even, they commute; if it is odd, they do not. 

Since Mi is all X's, it disagrees with M r (for r > 3) whenever M r has a Y or a Z. M r 
has 2 J ~ 2 of each, so we get 2 3 factors of -1, and [Mi, M r ] = 0. Similarly, M 2 disagrees with 
M r on X's and Y's, producing 2 j ~ 2 + 2 j ~ 2 factors of -1, and [M 2 , M r ] = also. Mi and M 2 
disagree on every qubit, and since there are an even number of qubits, [Mi, M 2 ] = 0. 

For r, s > 3, both M r and M s follow the pattern described above. I will consider the 



cases s = r + 1, s = r + 2, and s > r + 2. Table [VJ compares M r and M s on blocks of size 
2i-( s - 2 ). 

In general, half of each block will be normal and half will be reversed by a NOT. There- 
fore, the number of factors of -1 from commuting M r and M s will generally be 2^^^'^ times 
the total number of non-trivial disagreements for the normal and reversed rows. We also 
need to consider a few special cases. When r = 3, the generator never reaches the second 
half of the cycle, so we need to count up the disagreements only in the first half of the cycle. 
When s = a = j + 2, the block size is 1, so the NOT either affects the whole block or it does 
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M r norm I I Z Z X X Y Y 

M s norm I Z X Y I Z X Y 

M r rev X X Y Y I I Z Z 

M s rev X Y I Z X Y I Z 

r = s + 2: 

M r norm I I I IZZZZXXXXYYYY 
M s norm I ZXYI ZXYI ZXYI ZXY 

M r rev XXXXYYYYIIIIZZZZ 
M s rev X Y I Z X Y I Z X Y I Z X Y I Z 
TABLE VI. Comparisons of M r and M s in blocks of size 2 J ~( S_2 ) when the normal cycle applies 
and when it is reversed by a NOT. 
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not affect any of it. In this case, we need to count disagreements only on every other block. 
For even j, count the normal disagreements on even numbered blocks and the reversed dis- 
agreements on odd numbered blocks. For odd j, we must count normal disagreements on 
even-numbered blocks in the first half and odd-numbered blocks in the second half; count 
reversed disgreements on odd-numbered blocks in the first half and even-numbered blocks 
in the second half. We must also consider the combined special case of r = 3, s = a. 

For s = r + 1, the general case gives 4 blocks with normal disagreements and 2 blocks 
with reversed disagreements. When r = 3, there are 2 blocks with normal disagreements and 
2 blocks with reversed disagreements. When s = a, and j is even, there are 2 blocks with 
normal disagreements and blocks with reversed disagreements. When s = a and j is odd, 
there are also 2 blocks with normal disagreements and blocks with reversed disagreements. 
Because a > 5, we do not need to consider the combined special case. Thus, whenever 
s = r + 1, there are an even number of disagreements and M r and M s commute. 

For s = r + 2, the general case gives 6 blocks with normal disagreements and 6 blocks 
with reversed disagreements. For r = 3, there are 2 blocks with normal disagreements and 
4 blocks with reversed disagreements. For s = a, j even, there are 4 blocks with normal 
disagreements and 2 blocks with reversed disagreements. For s = a, j odd, there are 2 blocks 
with normal disagreements and 2 blocks with reversed disagreements. For r = 3, s = a, it 
does not matter if j is even or odd, since we only consider the first half. In this case, there 
is 1 block with a normal disagreement and 1 block with a reversed disagreement. In all of 
these cases, the total number of disagreements is even, so for s = r + 2, [M r , M s ] = 0. 

For s > r + 2, generator M s completes 2 s ~ r ~ 2 cycles before M r advances to the next 
step in the cycle. This means we can just find the number of disagreements by multiplying 
the number of disagreements for s = r + 2 by 2 s ~ r ~ 2 . We can do this even for the special 
cases, since the cycle repeats after 4 steps, which does not change the parity. Thus, there 
will always be an even number of disagreements, and all of the generators of Ti commute. 
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